Meeting CJIS v6.1 requirements means more than just implementing security controls. Agencies need to ensure these controls are consistently applied and auditable. Here are five key areas to focus on for easier compliance management:
1. MFA Coverage Across Your Environment: Start by reviewing MFA coverage across your environment, with particular attention to legacy applications and administrative accounts. Consider using phishing-resistant methods like FIDO2 security keys. Reliable processes for enrollment, replacement, and revocation of authenticators are crucial. Tools like Specops Secure Access can help extend MFA protection to Windows logons, RDP, RADIUS, and offline access.
2. Secure Active Directory Passwords: Secure your Active Directory passwords with Specops Password Policy, which blocks 4+ billion compromised passwords and aligns with NIST recommendations. Encourage longer, unique passphrases and use approved password managers. Screen for compromised passwords, updating password blocklists at least quarterly. Specops Password Policy simplifies password policy management and continuously checks against compromised passwords.
3. Effective Account Management: Implement effective account management practices. Keep an accurate inventory of user, administrative, service, and temporary accounts. Limit permissions to what is needed for each role, separate administrative privileges from everyday activities, and automate account provisioning and removal where possible. Conduct annual account reviews, removing temporary and inactive accounts within the required timeframes. Tools like Specops Password Policy can help enforce these policies and continuously monitor for compromised passwords.
By focusing on these three areas, agencies can ensure they are meeting CJIS v6.1 requirements and maintaining strong security practices. Specops Secure Access and Specops Password Policy are valuable tools to simplify and enforce these practices, ensuring compliance and protecting sensitive information.
Additional Recommendations:
- Regularly review and update MFA configurations as systems and access needs change.
- Use Specops Secure Access to extend MFA protection to Windows logons, RDP, RADIUS, and offline access.
- Implement Specops Password Policy to secure Active Directory passwords and enforce strong password policies.
By prioritizing these areas and using the right tools, agencies can achieve CJIS v6.1 compliance and maintain robust security practices.